1265210 - Firefox opens new tab without permission

Status: RESOLVED WONTFIX

(Core :: General, defect)

Description

[w0wkin]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0
Build ID: 20160407164938

Steps to reproduce:

Install noscript and AdBlock Plus.
Go to joyreactor.cc, enable scripts only for  joyreactor.cc and jr-cdn.com




Actual results:

Sometimes, randomly, mouse click on page in any place open new tab with ad, without asking user permission. The firefox setting "Ask user when page opens new tab" or whatever is... enabled in settings.


Expected results:

Firefox should ask user when page want to open new tab. 
I think there is some security vulnerability that is used to open new tab without permission. I think there is some code injection with page style formatting that is coming from jr-cdn.com 
There is no problem to block joyreactor forever, but vulnerability should be fixed.

Comment 1

[Michelle Funches - QA]

Confirmed Reproducible
Version 	45.0.2
Build ID 	20160407164938
User Agent 	Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
E10s Specific = No
Please review and change component if necessary may be better fit for Core JS

Comment 2

[Frederik Braun [:freddy]]

Pages can open new tabs. That's a thing.